| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.e1-racecar .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.alabamasalesrecruitment .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.hkmtta .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.ranftl .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.sexualidadesrosario .com .ar domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.inthepress .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.edbask .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sachikana .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rotorootie .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.highdesertcoders .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.badrag .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.le-baux .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.quicquaro .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.tar .nz domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.sostech .net .au domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.ekhatri .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.horizonpublishingllc .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.7btech .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.autoescuelaelsoto .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.seclogistic .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.nursph .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.infomasc .com .ar domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.jusiak .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rafflesiagroup .com .my domain |
rev 1 |
2026-07-02 |
| splunk |
Batch File Write to System32 |
production |
2026-07-02 |
| splunk |
Common Ransomware Notes |
production |
2026-07-02 |
| elastic |
Deprecated - Unusual Command Execution from Web Server Parent |
deprecated |
2026-07-02 |
| elastic |
Deprecated - EggShell Backdoor Execution |
deprecated |
2026-07-02 |
| elastic |
Deprecated - Linux Restricted Shell Breakout via Linux Binary(s) |
deprecated |
2026-07-02 |
| elastic |
Deprecated - Uncommon Destination Port Connection by Web Server |
deprecated |
2026-07-02 |
| elastic |
Deprecated - Unusual Process Spawned from Web Server Parent |
deprecated |
2026-07-02 |
| elastic |
Deprecated - Sudo Heap-Based Buffer Overflow Attempt |
deprecated |
2026-07-02 |
| splunk |
Powershell Remote Thread To Known Windows Process |
production |
2026-07-01 |
| sigma |
Failed Event Log Clear Via WMI NTEventLogFile ClearEventLog |
test |
2026-07-01 |
| sigma |
Windows Defender Disabled Via SystemSettingsAdminFlows.EXE |
experimental |
2026-07-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.kandla .com domain |
rev 1 |
2026-06-30 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.kandla .com domain |
rev 1 |
2026-06-30 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.joeseitz .com domain |
rev 1 |
2026-06-30 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.kandla .com domain |
rev 1 |
2026-06-30 |
| snort |
ET WEB_SPECIFIC_APPS [aretiq.ai] Apache OFBiz requirePasswordChange Authentication Bypass Attempt |
rev 1 |
2026-06-30 |